IN THE CLAIMS 

A presentation of all of the pending claims with their current status indicated follows. 

1. (Canceled) 

2. (Previously presented) The method as defined in claim 11, wherein the sequence 
number is transmitted together with the signing key from the control center to the sender, and 
is transmitted from the sender via the data set to the receiver. 

3. (Previously presented) The method as defined in claim 11, wherein the sequence 
numbers are used to produce signing keys in the control center and corresponding checking 
keys in the receiver. 

4. (Previously presented) The method as defined in claim 11, wherein the sequence 
numbers are used to produce signing keys used in the control center and corresponding check 
keys are used in the receiver wherein the sequence number is transmitted via the data set to 
the receiver. 

5. (Previously presented) The method as defined in claim 11, wherein the sequence 
number is produced by a pseudo-random number generator. 

6. (Previously presented) The method as defined in claim 11, wherein the encryption 
of the sequence number by means of the main key is used as the one-time encryption. 

7. (Previously presented) The method as defined in claim 11, wherein the control 
center produces a number of pairs of signing keys and sequence numbers, and transmits the 
signing keys to the sender, either separately or together as pairs with the associated sequence 
numbers. 

8. (Previously presented) The method as defined in claim 11, wherein the receiver 
maintains a list of already used sequence numbers, and rejects already used sequence 
numbers. 
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9. (Currently Amended) A device for signing a message which is sent from a sender 
to a receiver comprising: 

a control center having a first memory [[a«4]] . the control center including one input 
of a one-time encrvpter being connected to the first memory of the control center and another 
input being connected to a generator for a sequence number; 

a receiver having a second memory , each of the control center and the receiver storing 
each storing a secret, common main key , the receiver comprising a signature checker having 
inputs connected to a message and to a signature of a data message block which has arrived 
via a secured transmission : 

tho control center including, one input of a first one - time encrypter being connected to 
the first memory of the control center, and another input being connected to a generator for a 
sequence number, 

a sender capable of receiving at least one pair of a signing key and the selected 
sequence number from the control center, an output of the firs^-one-time encrypter being 
connected to the sender via the[[a]] transport medium secured transmission, the sender 
comprising, [[t]] 

. a signature generator provided in the sender, and having inputs connected to the 
output of the fwsH>ne-time encrypter and to the message to be signed [[i]] , and 

an output of the signature generator providing a signature and being connected to a 
device which assembles at least the signature and the message to form [[a]]the data message 
block and whose output is connected to the receiver via [[a]] the secured transmission 
transport medium ; 

a signature checker provided in the receiver having inputs connected to tho message 
and to the signature of the data mes s age block which has arrived via the transport medium, 
and wherein 

the inputs of the signature checker are further connected to an output of a second the 
one-time encrypter for providing a check key, whose inputs are connected to the second 
memory of the receiver for the secret main key and to a means for determining a sequence 
number for the received data message block, the check key and the determined sequence 
number being used to derive the check key that is used to form a calculated signature for 
comparison to the signature of the data message block : wherein the control center, the 
receiver, and the sender are individual and separate one from the other . 
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. 10. (Previously presented) The device as defined in claim 9, wherein the generator to 
produce a sequence number uses a deterministic method to produce one or more sequence 
numbers that correspond to the same number of check keys. 

11. (Currently Amended) A method for signing a message from a sender and for 
checking a signature at a receiver, the method comprising the steps of: 

storing, in a control center and a receiver, a shared main key; 

causing the control center to produce one or more sequence numbers; 

using a selected one of the sequence numbers and the shared main key to create a 
signing key by means of a one-time encryption; 

providing at least one pair of the signing key and the selected sequence number to the 
sender via a secure transmission; 

the sender using the at least one pair of the signing key and the selected sequence 
number to form a signature for a message; 

the sender forming a data set; 

the sender sending the message to the receiver via the data set containing at least the 
message and the signature; 

determining, at the receiver, a sequence number for the received data set; 

passing the determined sequence number and the shared main key through a one-time 
encryption to produce a check key; 

using the check key that is derived from and-the determined sequence number to form 
a calculated signature; and 

comparing the calculated signature to the received signature to verify the received 
message : wherein the control center, the receiver, and the sender are individual and separate 
one from the other . 

12. (Previously presented) The method as defined in claim 2, wherein the selected 
sequence number is transmitted via the data set from the sender to the receiver, the step of 
determining a sequence number includes extracting the sequence number from the received 
data set. 
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13. (Currently Amended) The method as defined in claim 5, the step of 
determining a sequence number includes: 

storing, at the receiver, an initial value for the pseudo-random number generator; and 
when a data set is received receiving the data set at the receiver, the receiver 
producing a new value of the sequence number. 

14. (Previously presented) The method as defined in claim 11, wherein the sequence 
numbers are comprised of one of decreasing numbers, numbers with a step interval greater 
than unity and numbers representing a date and time, the time including a number of seconds 
from an appointed start time. 

15. (Previously presented) The method as defined in claim 11, wherein the secure 
transmission of the signing key and the selected sequence number between the control center 
and the sender includes one of printing on security paper and storage in a smart card. 

16. (Previously presented) The method as defined in claim 11, wherein the calculated 
signature and the received signature are the same when the check key and the signing key are 
the same. 

17. (Previously presented) The method as defined in claim 11, wherein the control 
center is comprised of a control center for a financial institution, the sender is comprised of 
one of a manufacturer of an automated cash dispensing mechanism and a local branch of the 
financial institution, and the receiver is comprised of an automatic cash dispensing 
mechanism. 
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